request-ip

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, a strong sign that maintenance has currently stalled.

Build provenancecaution

No build attestation, trusted publisher, or staged publishing is recorded, reducing publication transparency, but this is a process gap rather than evidence that the package is unfit.

Maintainerscaution

Only one registry account has publish access. This is not evidence of active work by itself and leaves limited apparent publishing redundancy, though the repository owner matches that account.

Project backingcaution

The repository is owned by an individual rather than an organization, so there is no organizational backing to compensate for the single-maintainer and inactive-commit signals.

Release historycaution

The package has 27 releases and a long history, but its latest release was over four years ago and it has had no releases in the last 12 months, which raises maintenance risk.